random bits of openssl (mostly to poke around gemini certs)

                                      __ 
.-----.-----.-----.-----.-----.-----.|  |
|  _  |  _  |  -__|     |__ --|__ --||  |
|_____|   __|_____|__|__|_____|_____||__|
      |__|                               

```
openssl x509 -inform pem -in ~/.local/share/amfora/spelling_game-cert.pem -noout -text | less
openssl to view public key to verify cn/subject is correct
# get hash
openssl x509 -noout -modulus -in certificate.crt | openssl md5
openssl rsa -noout -modulus -in privateKey.key | openssl md5
openssl req -noout -modulus -in CSR.csr | openssl md5

```
useful links (for verification)

- https://serverfault.com/questions/215606/how-do-i-view-the-details-of-a-digital-certificate-cer-file
- gemini://ingrix.info/cgi/ip (how do you get the hash?)
- https://github.com/michael-lazar/jetforce/blob/master/examples/redirect.py
- https://www.makethenmakeinstall.com/2014/05/ssl-client-authentication-step-by-step/A
- via https://github.com/michael-lazar/jetforce/tree/master#tls-certificates
- https://github.com/pgorman/gneto#can-gneto-use-my-persistent-client-certificates-to-identify-me-to-servers
- https://www.nathanobert.com/posts/cheatsheet-openssl/#check-an-md5-hash-of-the-public-key-to-ensure-that-it-matches-with-what-is-in-a-csr-or-private-key
- https://serverfault.com/questions/1011294/how-to-view-certificate-chain-using-openssl